This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/S4BCPQhwpW0HcDkrQNegsGcCJLk.roa File: S4BCPQhwpW0HcDkrQNegsGcCJLk.roa (raw, json) Hash identifier: wpSj/pUY7w33xs3O0kJ9oHU/1uUgHVCcfo4sgGPqhGg= Subject key identifier: 4B:80:42:3D:08:70:A5:6D:07:70:39:2B:40:D7:A0:B0:67:02:24:B9 Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d Certificate serial: 019B797F04E269AE8ACA6A7F1987BA2EF68F Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/S4BCPQhwpW0HcDkrQNegsGcCJLk.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49722 IP address blocks: 91.215.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:04:e2:69:ae:8a:ca:6a:7f:19:87:ba:2e:f6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b80423d0870a56d0770392b40d7a0b0670224b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:85:dc:15:57:1f:df:c2:9c:6e:8e:50:9a: 1c:bb:49:5d:52:fb:1a:f6:19:28:5e:8c:90:a1:c1: 3f:3c:da:26:0e:19:b2:0f:01:4f:3c:9b:73:a2:b0: 10:db:97:80:1a:63:c2:a8:3d:23:44:14:af:6b:bc: 62:96:ef:ca:19:c0:5b:5d:d3:04:05:26:8e:69:e5: 79:74:fd:a9:d9:04:3c:e0:00:ae:54:04:22:e0:44: 37:83:55:9a:b3:b6:e7:31:c8:b4:b0:9a:7a:c3:ea: cd:1f:56:fa:09:63:68:62:89:7c:88:87:21:02:20: a3:39:83:71:8b:f8:79:f8:53:30:95:11:b3:b6:0a: e5:b3:d5:fa:06:90:f3:7c:2d:ce:a3:47:b8:c5:62: 27:49:d5:34:fe:61:b1:2d:2b:54:e5:7c:15:86:65: d3:84:1f:83:b8:84:82:af:aa:e9:c3:fb:4b:a0:8f: 7c:06:2e:1f:e8:ea:4a:78:fb:18:80:26:99:67:be: 9b:88:ab:5d:e8:53:c6:76:b1:5c:cf:02:a1:2b:36: 55:36:27:12:99:3a:3e:3f:49:76:fd:8c:04:29:a9: a6:1c:16:02:e7:c6:8f:25:33:c7:68:25:6e:9c:78: 42:bc:b2:dd:6d:4e:c2:fc:5d:b7:01:53:75:53:38: 9f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:80:42:3D:08:70:A5:6D:07:70:39:2B:40:D7:A0:B0:67:02:24:B9 X509v3 Authority Key Identifier: keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/S4BCPQhwpW0HcDkrQNegsGcCJLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.224.0/22 Signature Algorithm: sha256WithRSAEncryption 45:98:ad:0b:c9:ff:ea:a4:ba:40:7a:a0:05:24:f8:65:6e:21: 44:7b:e2:f0:63:d1:1c:af:66:47:a3:0b:54:07:85:b7:ae:c4: 9c:3f:37:c5:28:ab:9b:f3:73:95:4f:d5:1b:82:73:b4:a8:c9: a2:ee:6c:8b:52:91:5b:75:5f:0f:35:ef:4a:8e:d3:f5:eb:e8: 4d:46:d9:4c:80:ec:c8:bf:0b:fb:ca:f9:80:d8:78:e1:10:c3: e9:b5:44:00:c3:90:2a:31:7d:63:52:8e:23:e5:db:bc:01:1c: 5b:f7:d0:13:c5:5d:b9:26:82:7c:ec:3b:f0:55:24:61:b1:a7: e1:67:4a:08:f8:39:7a:7b:87:00:93:7b:80:1c:f2:0a:ea:10: a5:53:50:db:87:86:59:67:bd:6d:a2:ca:71:be:2f:5a:3c:23: 55:42:bd:1f:5c:5b:9a:e7:40:7b:ab:85:16:87:3c:9a:e9:91: a2:8b:a7:21:33:04:c2:36:e3:4f:7a:c2:99:6e:d9:df:0d:25: 3a:f0:51:6b:13:48:72:61:12:39:b8:b5:53:43:63:fa:7b:0a: 6a:c8:bd:41:4e:0b:80:b2:e4:57:9f:35:02:c7:b6:f2:9c:ac: e0:12:5b:c3:17:77:d8:80:16:a8:96:a2:73:6b:b2:28:a3:04: 20:90:4d:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwTiaa6Kymp/GYe6LvaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5 NjFiNmQwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjgwNDIzZDA4NzBhNTZkMDc3MDM5MmI0MGQ3YTBiMDY3MDIyNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCF3BVXH9/CnG6OUJocu0ldUvsa 9hkoXoyQocE/PNomDhmyDwFPPJtzorAQ25eAGmPCqD0jRBSva7xilu/KGcBbXdME BSaOaeV5dP2p2QQ84ACuVAQi4EQ3g1Was7bnMci0sJp6w+rNH1b6CWNoYol8iIch AiCjOYNxi/h5+FMwlRGztgrls9X6BpDzfC3Oo0e4xWInSdU0/mGxLStU5XwVhmXT hB+DuISCr6rpw/tLoI98Bi4f6OpKePsYgCaZZ76biKtd6FPGdrFczwKhKzZVNicS mTo+P0l2/YwEKammHBYC58aPJTPHaCVunHhCvLLdbU7C/F23AVN1UzifrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEuAQj0IcKVtB3A5K0DXoLBnAiS5MB8GA1UdIwQY MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt YjY4MzViNzMyYWQ2LzEvUzRCQ1BRaHdwVzBIY0RrclFOZWdzR2NDSkxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2 LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9fgMA0G CSqGSIb3DQEBCwUAA4IBAQBFmK0Lyf/qpLpAeqAFJPhlbiFEe+LwY9Ecr2ZHowtU B4W3rsScPzfFKKub83OVT9UbgnO0qMmi7myLUpFbdV8PNe9KjtP16+hNRtlMgOzI vwv7yvmA2HjhEMPptUQAw5AqMX1jUo4j5du8ARxb99ATxV25JoJ87DvwVSRhsafh Z0oI+Dl6e4cAk3uAHPIK6hClU1Dbh4ZZZ71tospxvi9aPCNVQr0fXFua50B7q4UW hzya6ZGii6chMwTCNuNPesKZbtnfDSU68FFrE0hyYRI5uLVTQ2P6ewpqyL1BTguA suRXnzUCx7bynKzgElvDF3fYgBaolqJza7IoowQgkE1g -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:34 2026 by rpki-client